Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/5ENNfLa1JM3BJQLGr_c3Bw3puho.roa
File: 5ENNfLa1JM3BJQLGr_c3Bw3puho.roa (raw, json)
Hash identifier: t0TU1ota0M9sju0lV/gFJqx+iYCBjzuB5bDzrUerFwo=
Subject key identifier: E4:43:4D:7C:B6:B5:24:CD:C1:25:02:C6:AF:F7:37:07:0D:E9:BA:1A
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019426D9E6207DF7AC302038092EB1D112B9
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/5ENNfLa1JM3BJQLGr_c3Bw3puho.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16125
IP address blocks: 5.199.160.0/20 maxlen: 32
5.199.165.0/24 maxlen: 32
46.166.160.0/20 maxlen: 32
93.115.24.0/21 maxlen: 32
185.8.104.0/22 maxlen: 32
185.150.116.0/22 maxlen: 32
188.214.128.0/21 maxlen: 32
2a02:ae00::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e6:20:7d:f7:ac:30:20:38:09:2e:b1:d1:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4434d7cb6b524cdc12502c6aff737070de9ba1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:d7:d5:91:63:12:a5:84:61:63:ec:5e:e4:
87:34:0e:41:d9:fe:b5:98:d7:26:d0:78:a1:02:b5:
7b:47:7c:b9:20:cd:2b:66:36:6e:49:ed:1f:82:90:
eb:3a:58:75:9e:eb:15:88:ac:e3:ae:80:0d:47:2c:
4e:db:ba:06:37:00:36:f4:11:c6:dd:fa:57:df:6a:
78:e9:01:c3:9e:8d:07:f8:86:a5:30:4d:93:84:23:
3c:2e:22:77:1d:61:49:33:b5:e2:72:ff:31:51:d1:
69:a3:fe:9d:02:9f:76:5a:ff:8b:18:13:10:b2:a1:
73:c4:ab:be:22:d5:ef:34:28:d8:1d:9b:b1:48:3c:
e3:03:41:c5:b6:9f:65:90:a4:e5:43:be:25:ef:1d:
c3:c9:ae:90:8b:85:fd:89:76:3a:04:80:94:ec:83:
66:f5:a1:c1:18:39:7e:6c:8a:52:b4:b1:6e:4a:17:
b0:ca:8e:16:39:2a:35:81:07:6c:3a:ad:0a:96:ad:
da:35:21:b3:af:a2:00:77:56:a4:01:4c:f0:a7:f8:
65:e4:ef:66:5e:bc:02:07:0a:46:67:be:d5:13:de:
c0:a5:38:1b:82:ff:05:a5:56:78:21:50:5b:70:29:
fe:c3:2f:4f:6d:d6:f3:c8:81:03:65:30:d3:a1:b8:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:43:4D:7C:B6:B5:24:CD:C1:25:02:C6:AF:F7:37:07:0D:E9:BA:1A
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/5ENNfLa1JM3BJQLGr_c3Bw3puho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.160.0/20
46.166.160.0/20
93.115.24.0/21
185.8.104.0/22
185.150.116.0/22
188.214.128.0/21
IPv6:
2a02:ae00::/36
Signature Algorithm: sha256WithRSAEncryption
6a:a8:5f:6b:fa:96:c7:11:e3:22:ad:17:d3:0f:b4:da:a4:13:
ab:81:29:e4:af:6c:31:4c:4b:cf:54:40:39:51:71:3c:a3:ea:
dd:e4:49:19:e1:6f:82:4f:f9:ea:1e:8e:f8:28:cf:b2:84:cf:
bf:49:99:28:d3:ac:66:9a:8e:31:0b:d6:b1:bd:dd:93:5b:75:
64:9b:a5:a1:62:0a:4a:b2:12:f6:79:d3:32:ab:e4:11:51:63:
ef:ae:31:81:5b:3a:19:3d:34:e9:b3:f7:9c:ea:b5:2c:48:43:
98:47:1f:05:f5:da:8a:63:21:d7:9e:30:a9:a7:07:52:b6:87:
f4:27:e3:8b:dc:42:cb:95:72:b9:cb:fa:21:e8:ca:ba:25:a1:
ef:2a:c1:60:fa:36:0e:37:b4:75:a0:5f:db:d7:f5:15:0d:4f:
5e:50:3e:90:4d:cc:87:60:35:39:36:4a:ee:7a:d1:cf:0c:ba:
b7:79:fa:ea:c5:d7:2b:16:78:05:9e:16:c7:68:3d:25:63:ce:
e4:b1:fd:14:3f:3c:20:02:74:42:4a:18:c2:3c:71:49:87:a6:
2e:e6:f7:88:19:dd:b8:23:9e:9c:c7:8a:4d:47:65:2e:54:e2:
98:ff:57:d3:61:44:f7:64:29:3c:d0:b1:d0:e6:69:48:bd:23:
ff:51:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:20:48 2025 by rpki-client